2 commits

Author	SHA1	Message	Date
CTO	2c9e90ac2b	docs(outline): note PKCE must be disabled on the Pocket ID client ... Outline's OIDC plugin does not send `code_challenge`, so the Pocket ID client must be created with `pkceEnabled: false` (default is `true`). Login fails with `?notice=auth-error` and Pocket ID rejects `/authorize` when PKCE is enforced. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-09-05 09:57:39 +00:00
cto-agent	38c7b8c624	feat(outline): deploy Outline knowledge base at outline.basicstack.de (DEV-559) ... - Namespace `outline` with Postgres 16, Redis 7, and Outline 1.10.0 - Stateful pods pinned to Hetzner location `fsn1` (encrypted CSI volumes) - Pocket ID OIDC integration (group-restricted to outline_admins/outline_members) - Hetzner Object Storage bucket `outline-basicstack` (region hel1) with CORS - Traefik Ingress with cert-manager `letsencrypt-prod` (DNS-01) - Sealed secrets for postgres, app (SECRET_KEY/UTILS_SECRET/URLs), OIDC, S3 - Argo CD Application `outline` in `apps/app-outline.yaml` SMTP notifications deferred (see apps/outline/README.md). Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-09-05 09:42:21 +00:00